A cryptocurrency exchange license is an authorization from a financial regulator to provide crypto exchange, custody or trading services to customers in its jurisdiction. You can apply for one yourself, acquire a company that already holds one, or operate through a licensed partner, and each route has very different costs, timelines and risks.
Three routes to a license
Apply for your own
The cleanest route. You set up a local entity, appoint qualified management and compliance staff, write policies, demonstrate your technology and security, meet capital requirements, and go through the regulator's review. It is slow, often many months to more than a year in demanding jurisdictions, but the license is unambiguously yours.
Acquire a licensed company
Some firms advertise "ready-made" licensed companies for sale. Be careful. In serious jurisdictions a change of control requires the regulator's prior approval, and the new owners and managers must pass the same fit-and-proper assessment as a fresh applicant. You also inherit the company's history, including any compliance failures. A license that cannot survive a change of control is worth far less than its asking price.
Partner with a licensed provider
You can run a brand and front end while a licensed partner provides the regulated services, for example through a brokerage, custody or "crypto-as-a-service" arrangement. This can be legitimate if the partner remains responsible for customers and controls the regulated activity. It is not legitimate if a license holder simply lends its name while you run everything; regulators treat that as unlicensed activity by you and a failure by them.
The major regimes at a glance
| Jurisdiction | Regime | Key points |
|---|---|---|
| European Union | MiCA crypto-asset service provider authorization | Granted by a national competent authority, passportable across the EEA. Operating a trading platform carries the highest minimum capital (€150,000). Transitional periods have ended, so EU customers now require MiCA authorization. |
| United States | FinCEN MSB registration plus state licenses | Money transmitter licenses are state by state; New York requires a BitLicense or a limited-purpose trust charter. Securities and commodities law add federal layers depending on the assets traded. |
| Dubai (UAE) | VARA licensing | Activity-based licenses for exchange, broker-dealer, custody and other services, with staged approvals before full operation. ADGM in Abu Dhabi runs a separate regime. |
| United Kingdom | FCA registration under money-laundering regulations | Registration has had a low approval rate historically; crypto marketing falls under the financial promotions regime. The UK is legislating for a fuller authorization regime for crypto-asset activities. |
| Singapore | MAS licensing under the Payment Services Act | Digital payment token services need a license. Rules extended in 2025 to Singapore firms serving only overseas customers, which MAS indicated it would generally not license. |
For the official text of the EU regime, see Regulation (EU) 2023/1114 (MiCA).
What regulators will examine
- People. Fit-and-proper directors and qualifying shareholders, a credible compliance officer and money-laundering reporting officer.
- Business plan. Services, target markets, revenue model and financial projections.
- Capital and safeguarding. Minimum own funds, plus segregation and protection of client assets.
- Policies. AML/CTF, custody, conflicts of interest, complaints, listing, business continuity and outsourcing.
- Technology. Security architecture, key management, penetration test results, and oversight of any white-label software vendor you rely on.
- Substance. Real local presence and decision-making.
Choosing a jurisdiction
Pick based on where your customers are, not where licenses are cheapest. A license in a lightly regulated offshore jurisdiction rarely permits serving the EU, US or UK, and it can make banking and payment partnerships harder rather than easier. Questions to answer:
- Which countries will most of your customers live in?
- Does a single license give you access to them, as a MiCA passport does across the EEA?
- Can you meet the substance requirements with real staff?
- Will banks and payment providers work with licensees in that jurisdiction?
- Does the regime cover everything you plan to offer, such as staking, derivatives or stablecoins?
Common red flags in "license packages"
- Guaranteed approval or fixed approval dates.
- Licenses from jurisdictions that do not actually regulate crypto exchanges, presented as if they do.
- Nominee directors with no real role, offered to satisfy substance requirements.
- No mention of ongoing obligations: audits, reporting, capital maintenance, compliance staff.
Licensing is one piece of the legal picture; the exchange legal requirements page covers AML, custody, listings and tax reporting, and the exchange development overview shows where licensing fits in the launch plan. If your platform will trade tokenized securities, a different regime applies; see security token offerings.
Frequently asked questions
How long does it take to get an exchange license?
It varies widely by regulator and by how complete your application is. Plan for many months, and longer in strict jurisdictions or when the regulator asks follow-up questions.
Can I start operating while my application is pending?
Generally no. Serving customers before authorization is usually an offense. Some regimes had transitional arrangements, but under MiCA those have ended.
Is buying a licensed company faster?
Sometimes, but the regulator must approve the change of control and assess the new owners, so the time savings are often smaller than advertised.
Does one license let me serve the whole world?
No license does. A MiCA authorization covers the EEA; other markets need their own permissions or must be excluded.